---
title: "Reveal Variables"
method: POST
path: "/api/apps/{name}/variables/reveal"
tags: ["deploy"]
---

# Reveal Variables

`POST /api/apps/{name}/variables/reveal`

## Request

- Base URL: `https://softkiln.com` (the document declares no server; this is the origin it was published from)
- URL: `https://softkiln.com/api/apps/{name}/variables/reveal`
- Auth: none declared

Return the values of specific keys. The only path to a *platform* value.

A caller's own vars come with the list; this endpoint is what remains for the
ones that never do. Browser-only by construction — the MCP tools have no
equivalent, so a secret never reaches an AI context. Platform-managed vars are
super-admin only, and BACKUP_HMAC_SECRET is never disclosed at all: it is
ours, the customer has no use for the value, and its fingerprint is already
on the backups page.

## Path parameters

- `name` string, required

## Query parameters

- `env` string

## Request body

- RevealVariablesRequest
  - `keys` string[], required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/softkiln/apis/app-manager-api.md) · [All operations](https://skmtc.dev/softkiln/apis/app-manager-api/llms.txt) · [OpenAPI document](https://skmtc.dev/softkiln/apis/app-manager-api/revisions/de2b674a7f21?raw)